Security

LAST UPDATED · 2026-08-05

Assembly Floor holds a manufacturer's operational memory — what you build, where it lives, what fails. We treat that with the seriousness it deserves. This page is written plainly, like everything else here; the detailed security documentation is available under NDA as part of any evaluation.

The AI boundary — the part most people ask about first

• Governed access. The assistant reads approved tables only. The list of what it may see is set by your admin, not by us, and not by the model.
• No personnel data to models. People data — schedules, time clocks, HR records — is excluded from AI retrieval outright.
• Permissions before retrieval. Access is checked before data is fetched, not after. Restricted data is never in the prompt in the first place.
• Answers carry sources. Every answer cites the records it came from, so it can be checked.
• Provider-agnostic. The AI provider is a config choice. Your data is not used to train anyone's models.

The platform

• Encrypted in transit (TLS) and at rest, everywhere.
• Every action is signed — named users, not shared logins. That audit trail is a product feature, and it applies to us too.
• Append-only memory: operational history is never silently overwritten.
• Daily backups, tested by restoring them — a backup that has never been restored is a hope, not a backup.
• Offline field capture syncs when signal returns; devices hold only what the signed-in technician is entitled to see.

Your data stays yours

• You own your operational data, full stop. Export it at any time in open formats.
• Hosting is flexible — including running inside your existing Microsoft estate. That is a hosting decision, not a rebuild.
• On exit, we hand over everything and delete our copies, on a schedule you set.

Reporting a vulnerability

If you find a security problem on this site or in the product, tell us through the contact form with "SECURITY" at the start of the message. A person reads it, quickly. We won't take legal action against good-faith research, and we'll credit you if you want credit.